CSRD for Non-EU Companies: Third-Country Undertaking Reporting Explained

If you sit in a US, UK, Swiss, Japanese, or any other non-EU headquarters and you have meaningful European operations, you are running out of quiet years to ignore the Corporate Sustainability Reporting Directive (CSRD). The third-country undertaking rules — the part of CSRD that reaches non-EU parents through their EU footprint — kick in with the FY 2028 reporting wave, and the preparation runway is shorter than it looks.

This guide explains exactly when a non-EU group is pulled into CSRD scope, what a third-country undertaking actually has to disclose under the dedicated ESRS NEC (Non-EU Companies) standard, how the obligations differ from the regime applied to EU-headquartered companies, and where a specialist CSRD consultant earns their fee in this cross-border setup.

Who Counts as a "Third-Country Undertaking" Under CSRD?

CSRD reaches beyond the European Union through two distinct routes. Most non-EU groups will be touched by at least one of them.

Route 1: An EU Subsidiary That Is Itself in Scope

If a non-EU parent owns an EU subsidiary that is a large company on its own merits — meeting the post-Omnibus thresholds of more than 1,000 employees on average and either more than €50 million in net turnover or more than €25 million in total assets — that subsidiary reports CSRD as an in-scope EU undertaking. The non-EU parent has no direct CSRD obligation through this route, but the subsidiary's report will inevitably include value-chain data that touches the parent and its other affiliates.

If a non-EU parent owns an EU subsidiary that is a large listed company, the same applies regardless of size.

Route 2: The Third-Country Undertaking Rule (Article 40a)

This is the route most international groups underestimate. Article 40a of the Accounting Directive, inserted by CSRD, requires consolidated sustainability reporting at the level of the non-EU ultimate parent when all three of the following are true:

The non-EU parent generated more than €150 million in net turnover in the EU in each of the last two consecutive financial years.
The non-EU parent has at least one EU subsidiary that is a large undertaking or a listed SME (excluding micro-undertakings).
Or the non-EU parent has an EU branch that generated more than €40 million in net turnover in the preceding financial year.

When all three apply, the report is produced at the level of the non-EU consolidated group — not at the level of the EU subsidiary or branch — and must cover the entire global group, not just its European activities. That last point is what catches most legal and finance teams off guard: a Texas-headquartered industrials group can find itself disclosing global Scope 3 emissions and global workforce metrics because of a couple of mid-sized European subsidiaries.

For a refresher on the underlying directive and how the EU regime works, see our what is CSRD overview.

The Timeline: Why FY 2028 Is Closer Than It Looks

Non-EU groups sit in what the Commission calls Wave 4 of CSRD reporting. The post-Omnibus calendar is:

Wave	Who	First reporting period	First report filed
Wave 1	Large EU public-interest entities (500+ employees)	FY 2024	2025 — already filed
Wave 2	Other large EU companies (post-Omnibus thresholds)	FY 2027	2028
Wave 3	Listed SMEs (with opt-out)	FY 2028	2029
Wave 4	Non-EU groups with substantial EU activity	FY 2028	2029

The Omnibus Simplification Package shifted the EU waves but did not delay Wave 4. Non-EU groups therefore have less marginal preparation time than their EU peers — and a more unfamiliar regulatory ecosystem to learn.

A practical implication: any non-EU group that expects to be in scope should be capturing FY 2027 baseline data this year and next so that year-on-year comparisons in the first report are credible. Starting data collection in late 2028 is almost guaranteed to produce a report your designated EU auditor cannot give limited assurance over.

What a Third-Country Undertaking Has to Disclose

This is where the non-EU regime diverges meaningfully from the standard ESRS that EU companies use. Third-country undertakings report under a dedicated, simplified standard called ESRS NEC (Non-EU Companies), developed by EFRAG specifically for this audience. ESRS NEC is narrower than the full ESRS Set 1, but it is not a free pass.

What ESRS NEC Covers

Under the current draft, ESRS NEC requires disclosures across four blocks:

General disclosures — basis of preparation, scope of the global consolidated group, methodology for materiality, governance arrangements for sustainability.
Environmental information — climate change (Scopes 1, 2, and 3, transition plan, targets), pollution, water and marine resources, biodiversity, and circular economy. The disclosures borrow from ESRS E1–E5 but with fewer data points and simplified narrative requirements.
Social information — own workforce (drawing on ESRS S1), workers in the value chain, affected communities, consumers and end-users. Headcount, diversity, health and safety, and human rights remain in scope.
Governance information — business conduct, anti-corruption, lobbying, payment practices.

What's Different from the Full ESRS

For a non-EU group with no prior EU sustainability reporting experience, ESRS NEC is materially less burdensome than full ESRS — but specific design choices need attention:

Single materiality, not double materiality. Unlike EU undertakings, third-country reporters do not need to run a full double materiality assessment on financial materiality. Impact materiality is the lens.
Fewer mandatory datapoints. EFRAG's analysis suggests ESRS NEC contains roughly 40–50% of the data points of full ESRS Set 1. The cuts focus on detailed quantitative tables and certain narrative disclosures.
Global scope. This is the trap. Even though the disclosure list is shorter, the boundary is the entire global consolidated group — every subsidiary worldwide, every operating site, every value-chain interaction. A US group of 30,000 employees and $8 billion in global revenue cannot duck the global footprint by pointing at its European subsidiary alone.
Filing location. The report is published at the EU subsidiary or EU branch level on its behalf — in practice this becomes one of the trickier logistical questions: which EU entity files, in which language, and how is signing authority handled across the Atlantic.

For the full picture of the EU regime and what it tries to achieve, see our overview of ESRS standards.

Assurance and Auditor Considerations for Non-EU Groups

A third-country undertaking's sustainability report must be assured by a statutory auditor or independent assurance services provider authorised in the EU — typically the same firm or network that audits the EU subsidiary or branch. The bar is limited assurance for the first reports, with reasonable assurance planned to follow once the European Commission issues the relevant standards.

Two complications hit non-EU groups specifically:

Coordination between the local audit firm and the EU assurance provider. US, Indian, or Japanese statutory auditors are not authorised to issue the EU sustainability assurance opinion. In practice, the global audit firm splits the work across affiliates and signs the EU opinion through its European member firm. Engagement letters need to be in place 12–18 months before the report is due.
Group audit dynamics. The EU assurance provider relies on work performed by the non-EU group auditor over subsidiaries that are inaccessible to it. Component auditor instructions, scoping memos, and consolidated workpapers need to anticipate the EU sustainability assurance requirements from day one.

For deeper context on what limited assurance actually looks like in practice, see our CSRD assurance and audit requirements guide.

How the US, UK, Swiss, and Other Jurisdictions Compare

Non-EU groups rarely face CSRD in isolation. The interactions with home-jurisdiction rules drive a lot of the planning work.

United States

US groups typically have to reconcile CSRD with:

SEC climate disclosure rules, where the disclosure boundary is the SEC registrant and the reporting framework leans on TCFD-style climate financial risk.
California's SB 253 and SB 261 for groups operating in California, which require Scope 1, 2, and 3 emissions disclosures and climate-related financial risk reports for companies above set revenue thresholds.
Voluntary reporting through ISSB-aligned standards, which many US groups have already adopted.

ESRS NEC's impact-materiality lens is the largest conceptual gap. SEC and ISSB rules anchor on enterprise value; ESRS NEC asks about impacts on people and planet. Mapping disclosures across these regimes — and avoiding duplicative data collection — is the highest-leverage piece of work an external consultant can take on for a US group.

United Kingdom

UK groups operate under their own Sustainability Disclosure Standards (SDS) regime, which is being aligned with the ISSB standards. Many large UK groups also have to file TCFD-aligned reports. CSRD third-country reporting overlaps significantly with TCFD on climate but goes considerably further on social and governance disclosure. Post-Brexit, UK groups with EU subsidiaries cannot rely on equivalence; CSRD applies directly to them as a non-EU group.

Switzerland

Swiss law requires non-financial reporting under the Swiss Code of Obligations for very large companies, and the Federal Council adopted a Climate Disclosures Ordinance that is broadly TCFD-aligned. Several large Swiss groups have already moved towards ESRS-aligned reporting voluntarily, which substantially shortens the lift when Article 40a applies.

Japan, Korea, Australia, Singapore

These jurisdictions are progressively adopting ISSB-based standards (Japan's SSBJ, Australia's AASB S1/S2, Singapore's ISSB-aligned route, Korea's K-IFRS S1/S2). ISSB alignment is helpful on climate disclosure but does not satisfy ESRS NEC's wider social and governance requirements. Asian groups should expect to do additional work specifically on workforce, value chain, and business conduct disclosures.

The pattern is consistent: home-jurisdiction reporting will cover some of CSRD's ground, especially on climate, but never all of it. A specialist consultant who can run the cross-framework mapping is worth the fee on day one of the project.

Practical Preparation: A 24-Month Pre-Reporting Roadmap

For a non-EU group planning for FY 2028, a realistic preparation roadmap looks like this:

Months 1–3: Scoping and Legal Determination

Confirm with EU counsel whether Article 40a applies to your group. The €150 million EU turnover test sounds simple but raises questions about which entities count, how intra-group transactions are treated, and how EU branches are aggregated.
Identify the EU subsidiary or branch that will publish the report on the group's behalf.
Map current home-jurisdiction sustainability reporting against ESRS NEC requirements.

Months 4–9: Materiality and Gap Analysis

Run an impact materiality assessment at the global consolidated level. This is closer to a GRI-style exercise than to ESRS double materiality, but it must engage stakeholders meaningfully.
Complete a CSRD data gap analysis across every material ESRS NEC datapoint.
Identify data owners in every operating region — global Scope 3 emissions and workforce metrics are typically the largest gaps.

Months 10–18: Data Collection and Internal Controls

Establish a global data collection process. ESG data platforms are useful, but governance and controls matter more than tooling.
Run a dry-run reporting exercise mid-cycle using whatever data you have. The dry run uncovers the dirtiest data and the slowest internal processes.
Engage the designated EU assurance provider on an advisory basis. Pre-assurance comments are far cheaper than first-report findings.

Months 19–24: Drafting, Assurance, and Filing

Draft the consolidated sustainability statement in English; check whether the host EU member state's filing rules require an additional language version.
Plan for at least three rounds of auditor review before the report is finalised.
Confirm the digital tagging approach. ESRS NEC reports are subject to the same XBRL digital tagging regime, with its own ESEF taxonomy.

Where a CSRD Consultant Adds the Most Value for Non-EU Groups

Third-country reporting is one of the engagements where the gap between specialist and generalist consultant is most expensive. The five high-leverage areas to look for in any consultant you shortlist:

Article 40a scoping experience. They have walked at least one non-EU group through the legal determination and can show you a worked example, redacted where necessary.
Cross-framework mapping. They can sit with your existing SEC, ISSB, TCFD, GRI, or home-jurisdiction reports and tell you exactly what is already done, what is partially done, and what is missing — without re-running the work from scratch.
Global Scope 3 capability. They understand category 1 (purchased goods and services) and category 11 (use of sold products) at scale, not just office travel.
Multi-jurisdiction stakeholder engagement. Impact materiality across a global group means engaging stakeholders in markets where your team has no relationships. A consultant with regional networks moves faster.
EU assurance fluency. They can speak the language of the EU statutory auditor, anticipate the issues the auditor will raise, and reduce the number of late-stage findings.

The pricing for these engagements is materially above the in-EU equivalent — typical full-service implementations for a mid-sized non-EU group land in the €250,000 to €750,000 range over 18–24 months, with global enterprise groups going well above that. Our CSRD consultant cost guide walks through the drivers.

Common Misconceptions to Avoid

In conversations with non-EU sustainability leads since Article 40a was finalised, the same four misconceptions come up:

"We file ISSB / SEC / TCFD reports, so CSRD is duplicative and we'll skip it." ESRS NEC is broader on social and governance disclosures than any current major framework. There is no overlap-only path.
"Our EU subsidiary is small, so we're fine." The €150 million EU turnover threshold is group EU turnover, not subsidiary turnover. A handful of mid-sized subsidiaries can easily aggregate above the line.
"We can just report on European operations." Article 40a explicitly requires reporting at the level of the global consolidated group. European-only reporting will fail assurance.
"There's no penalty regime for non-EU companies." EU member states are transposing CSRD into national law with penalty regimes that apply to the EU filing subsidiary or branch — and reputational risk in the European market is non-trivial. See our CSRD penalties guide.

Next Steps for Non-EU Groups

If you sit in a non-EU finance, legal, or sustainability function and you think your group may be in Wave 4 scope, three immediate actions will pay back many times over:

Commission a one-week scoping memo. A specialist consultant can confirm Article 40a applicability and identify the filing entity in a fraction of the time an in-house team takes.
Start FY 2027 baseline data collection now. Year-on-year comparison is required from the first report. Capturing the baseline retrospectively is hard and assurance-unfriendly.
Shortlist a CSRD consultant with non-EU group experience. This is a small market — perhaps a few hundred individuals across Europe and the wider profession have actually delivered an Article 40a engagement. Choose carefully.

Find a CSRD Consultant Who Understands Non-EU Reporting

The CSRD third-country regime is unforgiving. Generalist sustainability advisors will struggle with Article 40a scoping, ESRS NEC interpretation, cross-framework mapping, and EU assurance dynamics — all at once. Specialist CSRD consultants who have worked on Wave 1 or Wave 2 engagements and have the cross-border experience to handle a global consolidated report are the right starting point.

Browse the CSRD Experts directory to find consultants with experience advising US, UK, Swiss, and Asian groups on third-country reporting. Filter by expertise in international ESRS implementation, double materiality, and EU assurance to build a shortlist that fits your group's footprint — and start the Wave 4 preparation work while there is still time to do it well.